DevSecOps Lead

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Techy Recruiter

WebsiteLinkedInAll Job Openings

2 - 10 employees

Founded 2018

🤝 B2B

🎯 Recruiter

☁️ SaaS

B2B • Recruitment • SaaS

Techy Recruiter is a tech recruitment consultancy founded by Tarek Mahdy that embeds into startup and scale-up teams to run end-to-end hiring functions. It offers embedded recruitment (retainer-based full-cycle hiring), sourcing-as-a-service (outbound sourcing, market mapping, AI-assisted boolean searches), and hiring process design (ATS setup, interview frameworks, scorecards, automation). The firm focuses on funded startups and product-led tech companies across the Netherlands, Germany, Finland, Portugal, wider EU, UAE, Saudi Arabia, and Egypt, with specialties in Web3, fintech, and SaaS. Services include sourcing, screening, interviews, offer management, stakeholder coaching, and onboarding/handoff of repeatable hiring processes. Founder has 10+ years in talent acquisition and the company emphasizes modern tooling, structured interviews, and automation.

📋 Description

• Define and lead Ajaib’s DevSecOps strategy, roadmap, standards, and operating model • Embed security controls throughout the software-development lifecycle • Integrate security testing into CI/CD pipelines across applications, services, and infrastructure • Implement and improve SAST, DAST, software-composition analysis, secrets detection, container scanning, and infrastructure-as-code scanning • Build automated security guardrails that help teams identify and resolve issues early • Partner with engineering and platform teams to improve the security of build, deployment, and release processes • Strengthen security across cloud environments, containers, Kubernetes, APIs, backend services, and internal platforms • Establish secure infrastructure-as-code practices and reusable security patterns • Improve identity, access, secrets, keys, and privileged-access controls across engineering environments • Define secure configuration baselines for cloud services, containers, workloads, and deployment platforms • Automate vulnerability identification, prioritisation, assignment, remediation tracking, and verification • Work with application security and engineering teams to reduce false positives and make security findings actionable • Support threat modelling, architecture reviews, and security assessments for new systems and platforms • Improve logging, monitoring, alerting, and detection across development and production environments • Partner with incident-response teams to strengthen readiness, containment, recovery, and post-incident improvements • Assess and improve software-supply-chain security, including dependencies, artefacts, build systems, and third-party components • Define DevSecOps metrics and provide clear reporting on security coverage, risk, and remediation progress • Build security knowledge across engineering teams through documentation, training, tooling, and practical guidance • Mentor DevSecOps and security engineers and help grow the function as Ajaib scales

🎯 Requirements

• Strong experience in DevSecOps, cloud security, platform security, security engineering, or infrastructure security • Experience leading DevSecOps programmes, technical initiatives, or security-engineering teams • Hands-on experience building and securing CI/CD pipelines • Strong knowledge of cloud security, containers, Kubernetes, infrastructure as code, and modern software-delivery practices • Experience implementing security tools such as SAST, DAST, software-composition analysis, secrets scanning, container scanning, and infrastructure-as-code scanning • Strong understanding of software-supply-chain security and secure build practices • Experience with cloud platforms such as AWS, Google Cloud, or Azure • Experience with tools such as Terraform, Kubernetes, Docker, GitHub Actions, GitLab CI, Jenkins, or similar technologies • Ability to write automation and integrations using languages such as Python, Go, Bash, or JavaScript • Strong understanding of identity and access management, secrets management, encryption, key management, and privileged access • Experience managing vulnerabilities across applications, cloud environments, infrastructure, and third-party components • Understanding of secure software-development practices, threat modelling, and application-security principles • Ability to translate security requirements into practical engineering controls and automated workflows • Strong communication and stakeholder-management skills • Strong written and spoken English.

🏖️ Benefits

• High-impact ownership: shape how security is embedded across Ajaib’s engineering and delivery practices • Meaningful technical challenges: secure cloud platforms, CI/CD pipelines, containers, applications, and financial systems • Real influence: partner directly with engineering and platform teams to improve how technology is built and operated • Security at scale: create automation and guardrails that protect the business as it grows • Leadership opportunity: define DevSecOps standards, mentor engineers, and help build a strong security-engineering culture • Meaningful mission: help protect customers, investments, personal data, and financial transactions